chore: update dependencies for security and compatibility, including …

[IonesioJunior]

This pull request focuses on improving dependency security and hygiene for both the aggregator and mcp projects by updating, replacing, and pinning several packages to address known vulnerabilities. It also removes unused dependencies and updates configuration overrides to enforce minimum secure versions, especially for transitive dependencies.

Dependency Security Updates

• Replaced python-jose with pyjwt in both aggregator/pyproject.toml and mcp/pyproject.toml to eliminate an unused package that introduced an ecdsa vulnerability. [1] [2]
• Added and updated pins for several core and transitive dependencies in mcp/pyproject.toml and its override section to address specific CVEs (e.g., requests, aiohttp, urllib3, starlette, werkzeug, authlib, mcp). Comments reference the vulnerabilities being mitigated for traceability. [1] [2] [3]

Dependency Cleanup

• Removed the unused python-jose from the mypy plugin override list in aggregator/pyproject.toml, reflecting its removal from dependencies.

Framework and SDK Updates

• Updated fastmcp in mcp/pyproject.toml to a newer version where authentication features are included by default and deprecated the previous auth extra.

SyftHub Integration

• Ensured that override dependencies for SyftHub SDK enforce minimum secure versions for critical packages, preventing transitive dependencies from introducing vulnerabilities.